This Week in Cybersecurity
Each week at Applied Tech we recap the biggest cybersecurity news headlines from the week to keep you informed and ready to face the latest threats. Here’s your breakdown for the week of August 29th – September 4th!
Google Patches Actively Exploited Chrome Zero-Day
Google shipped an emergency Chrome update fixing a high-severity zero-day, CVE-2026-85046, already being exploited in the wild. The bug is a type confusion flaw in V8, Chrome’s JavaScript engine, meaning a malicious webpage could corrupt memory and potentially achieve remote code execution inside the sandboxed renderer.
Google isn’t saying how it’s being used in attacks, just that it is. The update also patches nine other high-severity bugs across Network, WebGL, DevTools, and Skia. This is the sixth actively exploited Chrome zero-day patched this year, which says less about Chrome’s security posture and more about how much attacker energy is going into V8.
Update now via Settings > About Chrome, and if you’re on Edge, Brave, or another Chromium browser, patch there too once it lands.
Source: BleepingComputer
Read More
Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal
MAG refused to pay, and the FulcrumSec extortion group followed through by dumping roughly 550GB of data covering car park, lounge, Fast Track, and Wi-Fi sign-up records from Manchester, Stansted, and East Midlands airports.
HaveIBeenPwned confirms 8.8 million email addresses and phone numbers were exposed, alongside names, IPs, purchase records, and over 108,000 vehicle plates. The entry point is the part worth sitting with: FulcrumSec says it lifted admin keys sitting in plain sight in the frontend JavaScript of all three airport websites. Not a zero-day, not a supply chain compromise—just credentials nobody bothered to hide. MAG’s refusal to pay is being treated as a principled stand, but 8.8 million people are the ones absorbing the consequence of that stand.
Source: SecurityWeek
Read More
RMM Phishing Campaign Hits 46 Countries, US Is the Top Target
A phishing operation first flagged for using fake Canada Revenue Agency tax forms turns out to be global, with ANY.RUN tracing 601 cases across 46 countries and 45% of activity aimed at the US. The lures rotate by target, UPS notices, Adobe PDFs, Social Security Administration themes, but the payload is consistent: tricking victims into installing legitimate RMM software, which then gives attackers hands-on-keyboard access without tripping malware signatures.
Infrastructure churns fast, with 94% of the 425 kit URLs observed for only a single day, hosted across Vercel, GitHub Pages, and Netlify. Researchers note the delivery chain—shared assets like font1.woff2 and a consistent secure.html → zip pattern—is far more stable than the domains, which is where detection should actually be pointed instead of chasing IOCs that expire daily.
Source: The Hacker News
Read More
FBI Investigates After 153 Million Driver's License Scans Surface on Dark Web
A dark web marketplace called Nexus started selling scans of more than 153 million US and Canadian driver’s licenses this week, plus ID cards, travel documents, and medical cards. Investigative journalist Brian Krebs traced the source to IDScan.net, an identity verification vendor that processes over 21 million checks a month for Fortune 500 clients across banking, retail, and law enforcement.
Some of the exposed licenses reportedly belong to FBI agents, which is presumably why the bureau is now involved. Nexus went dark shortly after Krebs’s reporting, but the documents are almost certainly still circulating. The bigger issue: driver’s licenses are widely treated as strong identity proof, and this is a reminder that a scanned ID is just a file sitting on someone’s server … until it isn’t.
Source: SecurityWeek
Read More
About Applied Tech, An HBS Brand
Applied Tech is a leading IT and cybersecurity services provider dedicated to helping organizations protect their digital assets and scale their IT capabilities. Our proactive services span cloud management, security, productivity, and IT growth strategy—delivered by an experienced team with solutions built around your goals.
As part of Heartland Business Systems, we now bring greater resources, broader capabilities, and deeper technical expertise to every client relationship.
Get in Touch with Us
